Overview of the Para Vault
Para Vault is the core of the privileged access management solution. It contains a highly secure database that centrally encrypts and safeguards sensitive data such as privileged account credentials. To protect the database and the data within it, Para Vault uses a multi-layer encryption key hierarchy. Every item stored in the database is encrypted with its own randomly generated encryption key; at the top of the key hierarchy, Para Vault uses a unique server key and a unique recovery key. The server key is required to start Para Vault; following the highest security standard, this key is stored in the Utimaco Hardware Security Module (HSM).
Overview of Utimaco u.trust GP HSM Se-Series
The Utimaco u.trust GP HSM Se-Series is a hardware security module developed by Utimaco IS GmbH. It is a physically protected, specialized computer unit designed to perform sensitive cryptographic tasks and securely manage and store cryptographic keys and data. The u.trust GP HSM can be used as a universal, independent security component for heterogeneous computer systems.
Joint Value Proposition
The combination of Para Vault and Utimaco’s u.trust GP HSM delivers a highly secure privileged access management solution by protecting Para Vault's server key within a dedicated hardware security module. The HSM generates and securely stores the cryptographic key used to protect privileged credentials, ensuring that sensitive key material is never stored in plaintext on disk. This integration enhances the security of privileged account data, supports compliance requirements, and reduces the risk of unauthorized access through hardware-backed key protection.